Security Advisory

Mozilla Product Security Update Advisory (CVE-2024-26282, CVE-2024-26284)

  • Feb 27 2024

Overview

 

An update has been made available to fix vulnerabilities in Mozilla. Users of affected versions are advised to update to the latest version.

 

Affected Products

 

CVE-2024-26282

  • firefox for iOS before 123

 

CVE-2024-26284

  • focus for iOS before 123

 

Resolved Vulnerabilities

 

Universal Cross-Site Scripting (UXSS) vulnerability in Firefox for iOS (CVE-2024-26282)
universal Cross-Site Scripting (UXSS) vulnerability in Focus for iOS (CVE-2024-26284)

 

Vulnerability Patches

 

Vulnerability patches were made available in the February 2024 update. please refer to thereference site to update to the latest vulnerability patch version.

 

CVE-2024-26282

  • firefox version 123 for iOS

 

CVE-2024-26284

  • focus for iOS version 123

 

 

Referenced Sites

 

[1] Mozilla Foundation Security Advisories
https://www.mozilla.org/en-US/security/advisories/
[2] Mozilla Foundation Security Advisory 2024-07
https://www.mozilla.org/en-US/security/advisories/mfsa2024-07/
[3] Mozilla Foundation Security Advisory 2024-08
https://www.mozilla.org/en-US/security/advisories/mfsa2024-08/
[4] Mozilla Foundation Security Advisory 2024-10
https://www.mozilla.org/en-US/security/advisories/mfsa2024-10/

Tags:

Previous Post

Next Post